Search

Find a vulnerability

Search criteria

    1 vulnerability found for Access CX App by NISSAN SECURITIES CO., LTD.

    JVNDB-2017-000034

    Vulnerability from jvndb - Published: 2017-03-01 16:31 - Updated:2017-06-05 11:26
    Severity
    Summary
    Access CX App fails to verify SSL server certificates
    Details
    Access CX App provided by NISSAN SECURITIES CO., LTD. fails to verify SSL server certificates. Gaku Taniguchi of RiskFinder,inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Impacted products
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000034.html",
      "dc:date": "2017-06-05T11:26+09:00",
      "dcterms:issued": "2017-03-01T16:31+09:00",
      "dcterms:modified": "2017-06-05T11:26+09:00",
      "description": "Access CX App provided by NISSAN SECURITIES CO., LTD. fails to verify SSL server certificates.\r\n\r\nGaku Taniguchi of RiskFinder,inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000034.html",
      "sec:cpe": {
        "#text": "cpe:/a:nissan_securities:access_cx",
        "@product": "Access CX App",
        "@vendor": "NISSAN SECURITIES CO., LTD.",
        "@version": "2.2"
      },
      "sec:cvss": [
        {
          "@score": "4.0",
          "@severity": "Medium",
          "@type": "Base",
          "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
          "@version": "2.0"
        },
        {
          "@score": "4.8",
          "@severity": "Medium",
          "@type": "Base",
          "@vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "@version": "3.0"
        }
      ],
      "sec:identifier": "JVNDB-2017-000034",
      "sec:references": [
        {
          "#text": "http://jvn.jp/en/jp/JVN82619692/index.html",
          "@id": "JVN#82619692",
          "@source": "JVN"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2110",
          "@id": "CVE-2017-2110",
          "@source": "CVE"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-2110",
          "@id": "CVE-2017-2110",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-Other",
          "@title": "No Mapping(CWE-Other)"
        }
      ],
      "title": "Access CX App fails to verify SSL server certificates"
    }